ConfigServer Community Forum

Just updated to the latest versions via the front end and now spam is getting through. Anyone else encounter this? Status and logs look fine but it appears it is no longer assigning scores when it should.

Hi Sarah,
wondering if you know why MailScanner does thousands of access to a README file (every 5 seconds), like this (just a few lines from the log):

Nov 13 22:44:00 server1 MailScanner: Reading configuration file /usr/mailscanner/etc/MailScanner.conf
Nov 13 22:44:00 server1 MailScanner: Reading configuration file /usr/mailscanner/etc/conf.d/README
Nov 13 22:44:05 server1 MailScanner: Reading...

Hi All,

Because MailScanner seems to be letting more and more spam through, I'd like to train it, but the only method of training I'm aware of is painfully primitively slow: Going to MailWatch, hitting message operations and clicking one box at a time, having to wait 60 seconds for that one screen of trained messages to go through, then going back, going to next page, doing over.

Even if I...

I've just completed installing MailScanner, ClamAV and MSFE.

Taking a look around I saw @ mailwatch that a few accounts are sending spam.
All passed as CLEAN . Is there a way to stop them / filter them ?

I've been field a number of complaints that spam has been getting worse on our servers using mailscanner. I am running the latest MailScanner etc but looking at the headers I see

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.

I think this is causing the SA scores to be low thus letting spam thru. I was using Googles open DNS servers so instead I changed my...

I am hopeful to get info regarding my Technical Support company's comments when I reported my server email stopped working.

Them - I checked and it seems to be hanging when sending the mail. We will need to remove Mailscanner and reset exim to the defaults to be able to debug this further.

Them - This has been fixed now, please try it now. Exim is working fine now and mailscanner has been...

For the last two days I keep seeing these errors in the Mailscanner front end where the update buttons should be:
MailScanner - v4.79.11 installed
Failed to determine the latest version of the MailScanner Package
Failed to determine the latest version of ClamAV
Failed to determine the latest version of the MailScanner Front-End

I also seem to be getting the same errors with every config...

I keep getting emails quarantined saying:

MailScanner: A long gap in a name is often used to hide part of it

This is on messages from our PBX when it sends out voicemail as an attachment. I can't change it on that side, so where do I change it on the WHM Side?

Hi

My server (with csf and mailscanner installed) is bouncing mail sent to me from a yahoo account

They are getting the following bounce error

Remote host said: 550 signature_incorrect

Where do i look to see why this is being bounced ? (It never happened before mailscanner was installed)

Lately I'm getting server messages that say: The file system /dev/sda3, which is mounted at /var, has reached warn status because it is 83% full.

Tech support says This seems to be generated from the spam filtering of email traffic on the server.

What about the files in /var/log/sa ?
This has only been a problem in the last month, so I’m trying to figure out what is different.

The biggest...

We recently had to rebuild a server due to a crashed hard drive.
We had you folks install MailScanner before, and I am just trying to get it going again.

MailScanner seems to be fine, but I am getting this when attempting to open the MailWatch window:

Error:
Unable to select a regular expression for your primary virus scanner (auto) - please see the examples in functions.php to create one....

Is it possible to use the exiqgrep to look at the MailScanner queues since they are in an alternate location?

I tried the following but it didn't work.

exiqgrep -r someuser@domain.com /etc/exim_outgoing.conf

Best regards,
Eric

I have setup the quarantine log to capture copies of all accepted, and rejected emails.

Is there any way I can filter these results, to filter out emails that meet criteria like Subject content, or from address?

After upgrading the 4 components of the MailScanner FE today the users are receiving a lot of Warning: E-mail error detected error messages. Also many messages are being tagged as Other in the FE.

The version #'s are:
MailScanner - v4.84.5
ConfigServer MailScanner Script - v2.91
ClamAV - v0.98.1
MailScanner Front-End - v4.49

What do I need to do to get rid of these error messages?

Thanks...

hi,

It seems my server is unable to use Mail::ClamAV everytime i set clamavmodule as the virusscanner and do

Service MailScanner restart && tail /var/log/maillog

i get a message like

MailScanner: ClamAV Perl module not found, did you install it?

Yes i did ...

I recently installed MailScanner on a server, using the configuration from another server where it is successfully working as an example. (Both servers are the same, CPanel, OS, etc.)

All mail is being blocked as Bad Content/Infected.

The today's total box:

Processed: 216 10.7Mb
Clean: 0 0.0%
Viruses: 0 0.0%
Top Virus: None
Blocked files: 0 0.0%
Others: 216 100.0%
Spam: 0 0.0%
High Scoring...

Im sending a test email with a file that had an .exe attachment which is blocked by our server.

The postmaster reply to the user stating that the email sent contains a virus is being blocked with the following spam report

Spam Report:
Score Matching Rule
cached not
score=35.798
5 required
0.10 ANY_BOUNCE_MESSAGE
-1.90 BAYES_00
2.00 DSN_NO_MIMEVERSION
-0.00 NO_RELAYS
0.00...

We are still getting hammered by spam from .pw .me .us .bix etc Top level domains

When it was just .us and .pw we blocked the entire tld but now that list is growing and we can block them all ..

what Im wondering is can see simply change the bayes scoring to assign any email from those tlds a higher level of scrutiny - or perhaps set it so that any email from *.me starts out with a higher...

Was wondering if someone could help me figure out why when I send an email using webmail (squirrel mail) to someone I know with a pdf attachment and cc it to my own email address the email isn't delivered. It gets flagged in mailscanner/mailwatch as bad content/infected and I have to release it as ham in order for me to see it. When I send it using thunderbird however it get sent just fine. Is...